added judgement before modifying ipfw